https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_9.png

X12

Security Researcher

Contact Me

High

7

Total

Medium

10

Total

$8.76K

Total Earnings

#591 All Time

9x

Payouts

gold

2x

1st Places

silver

1x

2nd Places

regular

6x

Top 10

All

Sherlock

Mar '25

Symmio, Staking and Vesting

Symmio, Staking and Vesting

68.35 USDC • 2 total findings • Sherlock • X12

#10

high

`_addRewardsForToken` will brick tokens inside the contract

medium

Attacker can extend rewards to near infinity and lower the distribution

Jan '25

Aave v3.3

Aave v3.3

3,013.88 USDC • Sherlock • X12

#17

Dec '24

Ethos Reputation Market Fix Review Contest

Ethos Reputation Market Fix Review Contest

144.76 USDC • 1 total finding • Sherlock • X12

silver

medium

`_calcCost` rounds in favor of the user causing insolvency

Nov '24

Ethos Network Financial Contracts

Ethos Network Financial Contracts

1,466.89 USDC • 6 total findings • Sherlock • X12

gold

high

When users increase their vouch they will receive some part of the fees that thei've paid

high

Users can manipulate the buy price and buy votes at a lower one

high

`buyVotes` makes `ReputationMarket` insolvent

high

Buy fee is much higher than sell fee, causing a discrepency

medium

Users can avoid slashing

medium

`sellVotes` is lacking slippage protection

Nouns DAO - Auction Streams

Nouns DAO - Auction Streams

1,028.43 USDC • Sherlock • X12

#4

vVv Launchpad - Investments & Token distribution

vVv Launchpad - Investments & Token distribution

94.59 USDC • 1 total finding • Sherlock • X12

gold

high

Any user can steal other user's claims

Sep '24

Flayer

Flayer

79.24 USDC • 1 total finding • Sherlock • X12

#58

high

`claimRoyalties` can be called by our custom contract

Aug '24

Sentiment V2

Sentiment V2

245.33 USDC • 4 total findings • Sherlock • X12

#22

medium

LTV of 98% would be extremely dangerous

medium

Portocol fee on liquidations is calculated wrongly

medium

reallocate will revert when using USDT

medium

Chainlink min/max price is not validated

Jun '24

Mellow Modular LRTs

Mellow Modular LRTs

2,614.01 USDC • 2 total findings • Sherlock • X12

#4

medium

WStethRatiosAggregatorV3 will not work properly if the base token is anything but stETH

medium

`ratiosX96Value` rounds in favor of user and not vault